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Abstract — In the paper "New Results on Frame-Proof Codes 
and Traceability Schemes" by Reihaneh Safavi-Naini and Yejing 
Wang [IEEE Trans. Inform. Theory, vol. 47, no. 7, pp. 3029- 
3033, Nov. 2001], there are lower bounds for the maximal 
number of codewords in binary frame-proof codes and decoders 
in traceability schemes. There are also existence proofs using 
a construction of binary frame-proof codes and traceability 
schemes. Here it is found that the main results in the referenced 
paper do not hold. 

Index Terms — fingerprinting, watermarking, frame-proof 
codes, traceability schemes 



I. Introduction 

We will examine the results in the paper "New Results on 
Frame-Proof Codes and Traceability Schemes" by Reihaneh 
Safavi-Naini and Yejing Wang [1]. Frame-proof codes were 
introduced in [2] and is a technique to deter from illegal copy- 
ing. The basic idea is that somebody has a digital document 
they want to distribute to a number of users, and to make 
it possible to trace illegal copies, he/she incorporates small 
changes in the document. If a single user makes a copy of 
his/her document it is simple to determine the identity of the 
guilty user by examining the copy. 

A stronger attack is if several users cooperate to create a 
new document that is a combination of their copies, and it 
is here that frame-proof codes are useful. Each user gets a 
copy of the digital document that corresponds to a codeword 
in the frame-proof code. The relation between the codeword 
and the document copy is that each coordinate in the code 
decides what alternative is chosen in one of the places where 
changes are allowed. It is further assumed that users working 
together to create an unsolicited copy can in each changeable 
position only choose among the alternatives given in their 
copies. Described in terms of words in the code space, a group 
of users can create any word which for every coordinate is 
equal to at least one of the codewords belonging to them. The 
combinatorial properties of a frame-proof code are such that, 
as long as the number of redistributors is limited, they cannot 
create the codeword/document of another user. 

Traceability schemes were introduced in [3] and are in some 
ways similar to frame-proof codes. A common scenario is a 
broadcast of some digital data stream that is encrypted and 
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available only to authorized users. The stream is decrypted 
using a decoder containing suitable decryption keys. In a 
traceability scheme there is a base set K of keys, of which each 
decoder contains a unique subset of size k. A set of users may 
want to create a pirate decoder by using a suitable combination 
of some of the keys in their decoders. In a traceability scheme, 
if the number of users working together is limited, any such 
created pirate decoder will be possible to trace to at least one 
of the guilty users. The idea is that this property will deter 
from creating pirate decoders. 

In the discussed paper constant-weight codes are used to 
make bounds and explicit constructions. These codes have 
length I, constant weight w, minimum Hamming distance 25, 
and c is the number of cooperating, copy-distributing users. 
H(x) denotes the binary entropy function, and logarithms are 
in base 2. We will discuss Theorems 6, 7, 10, and 11 from [1]. 

II. On Theorem 6 

Our initial concern is Theorem 6 on binary frame-proof 
codes. It depends on the following displayed inequalities: 

<cr and fl3 + v / 13 2 + 48cr) /12a. ([1]:6) 



I 

We quote Theorem 6 from [1]: 

Theorem 6: Let q be a prime power. Suppose there exists 
a c-frame-proof code with length I < q, constant weight w, 
and c — l/w. Then, for any a > and I satisfying ( |[1]:6) , the 
maximum number of codewords n satisfies 



n > 



1 



,(5-1 ' 



([1]:13) 



There is no formal proof of this in [1], but we have 
studied the discussion leading to Theorem 6 in some detail 
to reconstruct a proof. We will not repeat the necessary steps 
here, but only mention that the implication in Lemma 3 of 
[1] is needed in the reverse direction for the proof to go 
through. That this implication is not an equivalence can be 
seen by using, for example, the code G = {0011, 0110, 1100} 
in Lemma 3, see [1]. 

In any case, the following counterexample shows explicitly 
that Theorem 6 does not hold. We restate the upper bound from 
[40 on the number of codewords in a c-frame-proof code over 

'The bound n < s T'/ ! + 2c — 2 mentioned in [1] is not valid for c-frame- 
proof codes as the authors claim, see [4]. The bound {TJ used here is less 
restrictive but will still be contradicted by Theorem 6. We also note that the 
definitions of feasible set (called set of descendants in [4]) differ between 
[1] and [4], but it is easy to verify that in spite of this, the definitions of 
frame-proof code are equivalent. 
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an alphabet of size s, 

n < c (s r *l - l) . (1) 

We will compare these bounds for code length I = 64 and 
c = 2. In Theorem 6 we also need values for q, 6, w and a. 
From the relation c = l/w we obtain w — 32, and we will 
use q = 64. Nothing is said about 5, but the lemmas leading 
to Theorem 6 require that S > 3, so we will use 5 = 3. The 
value for a must meet the inequalities in ( |[1]:6[ ), and we use 
a = 7/64. 

To be in compliance with the prerequisites of Theorem 6 we 
must show that there exists a 2-frame-proof code with these 
parameters. Let / be the unity matrix of size 3, and let 
and 1 be three-dimensional column vectors of zeros and ones 
respectively. Let T be a code with the code matrix 



J 3 T 29 26 , 



(2) 



meaning the concatenation of three unity matrices, 29 one- 
vectors and 26 zero-vectors. This code has three codewords 
and is a 2-frame-proof code. 

Now everything is in place, and with the proposed values 
in Theorem 6 we get 

1 



n > 



x 2 



64X (1-7/64) _ q45 



(2 6 ) 2 

Using the same I and c in ([]]) yields 

n < 2(2 32 - 1) < 2 33 



(3) 



(4) 



which clearly contradicts expression (0). Thus we conclude 
that Theorem 6 in [1] does not hold. 

III. On Theorem 7 

We now turn to the similar Theorem 7, which we quote 
from [1]. 

Theorem 7: Let q be a prime power. Suppose there exists 
a c-traceability scheme with I keys, I < q, such that there are 
k keys in each decoder, and c 2 = 21 /k. Then, for any a > 
and I satisfying ( 1[1]:6) , the maximum number of decoders n 
satisfies 



n > 



1 



,<5— 1 ' 



«1]:15) 



Again, there is no formal proof, but a similar exercise as 
for Theorem 6 shows that Lemma 5 in [1] is used in the 
reverse direction. We proceed straight to the counterexample. 
We restate from [5] an upper bound on the number of decoders 
in a c-traceability scheme, also given as expression (4) in [1]. 
In a c-traceability scheme it holds that 



n < 



«1]:4) 



and k is the number of keys contained in each 



where t = \-~ 
decoder. 

Let us choose I = 256 and c = 4. In Theorem 7 we also 
need values for q, 5, k and a. From the relation c 2 = 2l /k we 
obtain k = 32, and similarly to Section HI1 we choose q = 256, 
(7 = 9 / 256 , and <5 = 3. 



Using I = 256 and k = 32 it is possible to construct a 
trivial traceability scheme with eight decoders, each containing 
32 keys and no pair of decoders sharing any keys. This 
traceability scheme can handle (at least) c = 4 users working 
together to create a pirate decoder. 

Again everything is in place so we can use the proposed 
values in expression ( |[1]:15| ), and this yields a lower bound 
on the maximal number of decoders as 



n > 2 _iD x 2 



16 9 256x(H(i/i6)- 9 / 2 56) 



> 2 



61 



The same I, c and k in expression ( |[1]:4| ) yields 

/256^ 



n < 



\ 8 



'1' ) < 2- 



(5) 



(6) 



which clearly contradicts expression (0. Thus we conclude 
that Theorem 7 in [1] does not hold. 

IV. On Theorems 10 and 1 1 

Even if Theorems 6 and 7 do not hold, there is an explicit 
construction underlying Theorems 10 and 11 in [1], also 
providing lower bounds for the number of code words n. The 
claim is: 

Theorem 10: For a given integer c > 1, there exists a c- 
frame-proof code for which the parameters are restricted by 



(Hi 



c 1,1 ' 



and 



logZ < 



«1]:17) 
«1]:18) 



«1]:20) 



2 c- 1 

Unfortunately, there is no way to choose the parameters so 
that ( [[!]: 17) , ( |[l]:18| l and fl[l]:20) are simultaneously satisfied. 
Furthermore, even if we fall back to the underlying construc- 
tion, we find ourselves in similar difficulties. 

To see this, we start by inserting ( |[1]:17| > and ( |[1]:18| > in 
( |[ 1 [:20| i, arriving at 



logu>c < 



1 



4 c- 1 

The inequality In x < x — 1 gives us 

log c + log e 



which inserted in (|7]i yields 



log w + log c < 



1 c 2 log c + log e — 1 



(7) 



(8) 



(9) 



(10) 



4 c - 1 c 
The required integer c > 1 makes c /(c-i) < 2 and 

\ogw < i(loge — 1 — logc) < 0. 

That is, Theorem 10 enforces weight w < 1. We can only 
conclude that the theorem is invalid as it stands in [1]. 

We will now go into more detail in the proof of Theorem 10, 
to show that also the underlying construction scheme fails. In 
place of ( |[l]:20| i, this construction uses a more complicated 



3 



expression: the parameters must allow the existence of an 
integer S > such that 



1- 



-l <S <(H(l)-l-a) 



I 



log/ 



([1]:19) 



The left-hand inequality of ( |[l]:19| l ensures that the code is a 
frame-proof code, while the right-hand inequality ensures the 
desired behavior of the number of codewords n > 2 ! / c . The 
integer 5 is to be used in Theorem 8 and 9 of [1] to show 
existence of a code with the desired properties. The inequality 
( |[l]:20| i is claimed to guarantee existence of such a S, but there 
is no motivation of this claim in [1]. We will perform a more 
thourogh examination here which will show that no parameter 
values allow existence of such an integer 6 > 0. 

Inserting the conditions ( |[l]:17| i and ( |[l]:18| l in ( |[l]:19| l we 



arrive at 



:i-£)f-i<*<a(*(!)-*) 



(id 



log wc ' 

For the needed 5 > to exist, it is clear that the following 
needs to be positive: 

wc 



Using (O, we obtain 



log wc 



f(w,c) < ±(logc + loge - 1) 



-[(1- I) «,-!], (12) 



fl - i) iw+ 1. (13) 



log wc 



This is positive if w = 1. When w > 2 > e /2, we have 
\ogw > loge — 1, so that ([PTt simplifies to 



f(w,c) < w 



1 1 



(14) 



Clearly, < f(w,c) needs either w — 1 or w — 2 or c = 2, 
or that (c,w) is one of (3,3), (4,3), (5,3), (3,4) or (3,5). 
We analyze these four cases separately: 

a) When w = 1, using dSJ, the right-hand inequality of (fTTT i 
simplifies to 



logc 



(15) 



Consequently no such integer 6 > exists. 

b) When w = 2, the expression (13[ is 

logc + loge -1 2 loge -2 2 

/(2,C) < : — 1 + - = — + -, 

log c + 1 c log c + 1 c 

(16) 

which is positive for c = 2, decreases to a negative 
minimum and then increases to as c tends to infinity; 
it is positive only for c < 19, and for these values the 
left-hand side of ([PTT i is also less than 1. 

c) When c = 2 we have i?(V 2 ) = h so that 



f(w,2) = 



(17) 



2 log 2w 2 

This is strictly decreasing, and positive only for w = 2 
and w = 3; for these values the right-hand side of (fTTT i 
is also less than 1. 
d) The remaining candidates (w, c) = (3, 3), (4, 3), (5, 3), 
(3,4), and (3,5) all give f(w,c) a negative value. 



That is, there is no combination of w and c > 1 that allows 
an integer 6 > obeying expression ( |[1]:19[ ). A little more 
effort will show that for some combinations of w and c, there 
are S > that obey either the left or the right inequality, 
but not both. For these values of S, the constructed codes are 
either guaranteed to be c-frame-proof codes or guaranteed to 
have a number of code words n > 2 ! / c , but the constructed 
codes are never guaranteed to have both properties. 

Similar reasoning holds for Theorem 11, with the sole 
difference that the parameter c is inserted squared in the 
equivalent of expressions ( |[1]:20| > and ( |[1]:19| >. And in a 
similar fashion, the construction does not allow construction 
of a traceability scheme that is guaranteed to have the desired 
number of decoders. 

V. Conclusions 

We have found that Theorems 6 and 7 of [1] for some 
choices of parameter values violate previously published upper 
bounds. They can clearly not be valid as they stand. 

We have also found that Theorems 10 and 11 of [1] 
are invalid. There are no parameter values that fulfill the 
given bounds simultaneously; the requirements are simply too 
restrictive. In other words, the theorems cannot be used to 
prove existence of codes with the desired properties. The 
underlying construction gives codes which may have one of 
the two desired properties, but the codes are never guaranteed 
to have both. 
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